2009-11-01ãã1ã¶æéã®è¨äºä¸è¦§
ã¯ã¦ãªãã¼ã«ã¼æ¬²ããï¼ãã¬ã¼ã³ããã£ã³ãã¼ã³å½é¸è çºè¡¨ ã¯ã¦ãªããã¯ãã¼ã¯ãã¯ã¦ãªãã¤ã¢ãªã¼ãã¯ã¦ãªãã¤ã¯ãããã¡ã¢ã¯ã¦ãªã®4ãµã¼ãã¹ã®ã©ãããããå¿åããã ãã¨ãã¯ã¦ãªãªãªã¸ãã«ãã¼ã«ã¼ã5åæ§ã«å½ãããã¯ã¦ãªãã¼ã«ã¼æ¬²ããï¼ããã£ã³ãã¼ã³â¦
XSSèå¼±æ§ã®ä¿®æ£ã«ã¤ã㦠ã¨ã³ããªã¼ãã¼ã¸ã®ã¿ã¤ãã«ã«ãJavaScript ã³ã¼ãã®ã¨ã¹ã±ã¼ãæ¼ãã«ãã XSS èå¼±æ§ãè¦ã¤ããã¾ããã®ã§ä¿®æ£ãã¾ããããè¿·æãããããã¾ããããææããã ãããããã¨ããããã¾ããããã¤ã¼ããã
ã¨ã³ããªã¼ãã¼ã¸ã«ãããããã«ããã°ã§ç´¹ä»ã§ããæ©è½ã追å æ¬æ¥ã¨ã³ããªã¼ãã¼ã¸ã«ãã¯ã¦ãªããã¯ãã¼ã¯ã®ã¨ã³ããªã¼ãããããã«ããã°ã§ç´¹ä»ã§ããæ©è½ã追å ãã¾ããããã®æ©è½ããå©ç¨é ãã¨ãã¯ã¦ãªããã¯ãã¼ã¯ã®ããã¯ãã¼ã¯æ°(users)ç»åä»ããªâ¦
11/16 ã¯ã¦ãªããã¯ãã¼ã¯ãã¯ã¦ãªãã¤ã¯é害æ å ± æ¬æ¥17:25é ãããã¯ã¦ãªããã¯ãã¼ã¯ã¨ã¯ã¦ãªãã¤ã¯ã«æ¥ç¶ãã¥ããé害ãçºçãã¦ããã¾ããåé¡ã®èª¿æ»ããã³å¾©æ§ä½æ¥ãè¡ã£ã¦ããã¾ãããå©ç¨ã®ã¦ã¼ã¶ã¼ã®çãã¾ã«ã¯ãè¿·æãããããç³ã訳ãããã¾ããâ¦
ç§ã®ç¹ç£å欲ãã!ãã£ã³ãã¼ã³å½é¸è çºè¡¨ 10æ26æ¥ï¼æï¼ï½ 11æ8æ¥ï¼æ¥ï¼ã®2é±ééå¬ãã¦ããã¾ãã ãç§ã®ç¹ç£å欲ãã!ãã£ã³ãã¼ã³ããæ¬æ¥ãã¯ã¦ãªç¤¾å ã«ã¦å³æ£ãªæ½é¸ã®ä¸ãå½é¸è ã決å®ãããã¾ãããå½é¸ãããã¦ã¼ã¶ã¼æ§ã¯ä¸è¨ã®10åæ§ã§ããããã§â¦
(éçºè ãã¾åã)ã¯ã¦ãªããã¯ãã¼ã¯ Web Hook ã«ä½ããæ稿ãããããç¾ã client ãã©ã¡ã¼ã¿ã追å ãã¾ãã æ¬æ¥ãã¯ã¦ãªããã¯ãã¼ã¯ Web Hook ã«ãä½ããããã¯ãã¼ã¯è¿½å çãè¡ããããã®æ å ±ãä»ä¸ãããã©ã¡ã¼ã¿ã追å ãã¾ãããç¾å¨ãã¯ã¦ãªããã¯ãâ¦
ã¯ã¦ãªã¨ãã§ã³ãªã«ã®ã°ããºãã»ããã§å½ãããã¯ã¦ãªï¼ãã§ã³ãªã«ã®ãªãªã¸ãã«ã°ããºæ¬²ããï¼ããã£ã³ãã¼ã³ãéå§ãã¾ãã æ¬æ¥ãã¯ã¦ãªããã¯ãã¼ã¯ãã¯ã¦ãªããã¯ãã¼ã¯ãã¥ã¼ã¹ã¨é£åããæ©è½ãå å®ããããã§ã³ãªã«æä¾ã®Web ãã©ã¦ã¶ã®ã¹ã¿ã¼ããã¼ã¸â¦
ç§ã®ç¹ç£å欲ãã!ãã£ã³ãã¼ã³ãçµäºãã¾ãã å¿æ´ãããé½éåºçãããã¯ãã¼ã¯ããã ãã§æ½é¸ã§10åæ§ã«å°æ¹ã®ç¹ç£åãå½ãããç§ã®ç¹ç£å欲ãã!ãã£ã³ãã¼ã³ãããæ¨æ¥ 11æ8æ¥(æ¥) ããã£ã¦çµäºãã¾ãããããã¯ãã¼ã¯ãå¤ãéãã人æ°ã®é½éåºçã¯ãâ¦
ã¯ã¦ãªããã¯ãã¼ã¯ã¢ãã¤ã«ã§ãé²è¦§ã§ããªãä¸å ·å(ä¿®æ£æ¸ã¿) 11æ5æ¥ 22:35é ï½11æ6æ¥ 10:00é ã¾ã§ãã¯ã¦ãªããã¯ãã¼ã¯ã¢ãã¤ã«ã§ãµã¼ãå´ã®ã¨ã©ã¼ã«ãã表示ããé²è¦§ã§ããªãä¸å ·åãçºçãã¦ãã¾ãããç¾å¨ã¯ã¨ã©ã¼ãä¿®æ£ããæ£å¸¸ã«é²è¦§ã§ããããã«ãªâ¦